github - ghsa-x5ff-24v2-wj9j

ghsa-x5ff-24v2-wj9j

Vulnerability from github

Published

2022-05-01 18:17

Modified

2022-05-01 18:17

Details

The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-3806"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-07-17T00:30:00Z",
    "severity": "MODERATE"
  },
  "details": "The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure.",
  "id": "GHSA-x5ff-24v2-wj9j",
  "modified": "2022-05-01T18:17:23Z",
  "published": "2022-05-01T18:17:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3806"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35437"
    },
    {
      "type": "WEB",
      "url": "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166\u0026r2=1.167"
    },
    {
      "type": "WEB",
      "url": "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/36085"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26085"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26642"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27102"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/30158"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/30288"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2008/dsa-1572"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2008/dsa-1578"
    },
    {
      "type": "WEB",
      "url": "http://www.exploit-db.com/exploits/4181"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.php.net/ChangeLog-5.php#5.2.4"
    },
    {
      "type": "WEB",
      "url": "http://www.php.net/releases/5_2_4.php"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/24922"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/25498"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/2547"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

cve-2007-3806

Vulnerability from cvelistv5

Published

2007-07-17 00:00

Modified

2024-08-07 14:28

Severity ?

Summary

References

▼	URL	Tags
	http://secunia.com/advisories/30288	third-party-advisory, x_refsource_SECUNIA
	http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167	x_refsource_MISC
	http://osvdb.org/36085	vdb-entry, x_refsource_OSVDB
	http://www.vupen.com/english/advisories/2007/2547	vdb-entry, x_refsource_VUPEN
	https://exchange.xforce.ibmcloud.com/vulnerabilities/35437	vdb-entry, x_refsource_XF
	http://www.exploit-db.com/exploits/4181	exploit, x_refsource_EXPLOIT-DB
	http://www.debian.org/security/2008/dsa-1572	vendor-advisory, x_refsource_DEBIAN
	http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml	vendor-advisory, x_refsource_GENTOO
	http://www.php.net/ChangeLog-5.php#5.2.4	x_refsource_CONFIRM
	http://secunia.com/advisories/30158	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/26085	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1578	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/27102	third-party-advisory, x_refsource_SECUNIA
	http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log	x_refsource_MISC
	http://www.php.net/releases/5_2_4.php	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/24922	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/bid/25498	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/26642	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:28:52.456Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "30288",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30288"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166\u0026r2=1.167"
          },
          {
            "name": "36085",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/36085"
          },
          {
            "name": "ADV-2007-2547",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2547"
          },
          {
            "name": "php-glob-security-bypass(35437)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35437"
          },
          {
            "name": "4181",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/4181"
          },
          {
            "name": "DSA-1572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1572"
          },
          {
            "name": "GLSA-200710-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php#5.2.4"
          },
          {
            "name": "30158",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30158"
          },
          {
            "name": "26085",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26085"
          },
          {
            "name": "DSA-1578",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1578"
          },
          {
            "name": "27102",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27102"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/releases/5_2_4.php"
          },
          {
            "name": "24922",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24922"
          },
          {
            "name": "25498",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25498"
          },
          {
            "name": "26642",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26642"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "30288",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30288"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166\u0026r2=1.167"
        },
        {
          "name": "36085",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/36085"
        },
        {
          "name": "ADV-2007-2547",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2547"
        },
        {
          "name": "php-glob-security-bypass(35437)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35437"
        },
        {
          "name": "4181",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/4181"
        },
        {
          "name": "DSA-1572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1572"
        },
        {
          "name": "GLSA-200710-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php#5.2.4"
        },
        {
          "name": "30158",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30158"
        },
        {
          "name": "26085",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26085"
        },
        {
          "name": "DSA-1578",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1578"
        },
        {
          "name": "27102",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27102"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/releases/5_2_4.php"
        },
        {
          "name": "24922",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24922"
        },
        {
          "name": "25498",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25498"
        },
        {
          "name": "26642",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26642"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3806",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "30288",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30288"
            },
            {
              "name": "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166\u0026r2=1.167",
              "refsource": "MISC",
              "url": "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166\u0026r2=1.167"
            },
            {
              "name": "36085",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/36085"
            },
            {
              "name": "ADV-2007-2547",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2547"
            },
            {
              "name": "php-glob-security-bypass(35437)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35437"
            },
            {
              "name": "4181",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/4181"
            },
            {
              "name": "DSA-1572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1572"
            },
            {
              "name": "GLSA-200710-02",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php#5.2.4",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php#5.2.4"
            },
            {
              "name": "30158",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30158"
            },
            {
              "name": "26085",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26085"
            },
            {
              "name": "DSA-1578",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1578"
            },
            {
              "name": "27102",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27102"
            },
            {
              "name": "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log",
              "refsource": "MISC",
              "url": "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log"
            },
            {
              "name": "http://www.php.net/releases/5_2_4.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/releases/5_2_4.php"
            },
            {
              "name": "24922",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24922"
            },
            {
              "name": "25498",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25498"
            },
            {
              "name": "26642",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26642"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3806",
    "datePublished": "2007-07-17T00:00:00",
    "dateReserved": "2007-07-16T00:00:00",
    "dateUpdated": "2024-08-07T14:28:52.456Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted